The Federal Trade Commission is taking a tougher stance on companies that fail to safeguard consumer data—and is even going so far as to hold individuals personally accountable for those failings.